HexBrain

Weblate · Report #229511

No Rate Limiting at /contact

Validstatus
lowseverity
8upvotes
2 Jun 2017disclosed

How it was found

Hi Weblate Security Team,

How are you? Hope you all have a good day and doing well just like me. :) I've found a No Rate Limiting in contact directory of your site because there is no mitigation in there like adding a captcha, In this case the attacker can spam you.

https://hosted.weblate.org/contact/

Best Regards, Jolan Saluria

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original